Security audit

Deepvista Recipe Import Files

Security checks for vulnerabilities and agentic risk

Overview

The skill is coherent, but it needs review because it can recursively upload exact local file contents, including possible secrets, into DeepVista unless the user scopes it carefully.

Install only if you are comfortable sending selected local file contents to DeepVista. Use a narrow directory or extension allow-list, explicitly exclude secrets and hidden credential paths, review the matched files before upload, and avoid running this on a whole home directory or repository that may contain .env files, keys, tokens, databases, or private configuration.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:35
Finding: Recursive import may expose sensitive local files to an external service
Content: View full analysis
" \ --content-file "" \ --tags '["imported"]' ``` ``` ### Technical Analysis The skill recursively discovers files and passes each absolute path to `deepvista card create --content-file`. This causes the exact file contents to be transferred to DeepVista and stored as a context card. The default exclusions only cover source-control metadata, dependency directories, caches, virtual environments, and generated output. They do not exclude common secret-bearing files and directories such as: - `.env` and `.env.*` - `*.pem`, `*.key`, and private certificates - `.ssh/` - Cloud-provider credential directories - Token and credential JSON files - Local d ...[truncated 1793 chars]
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:15
Finding: DeepVista CLI dependency is installed without version or integrity pinning
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.